General
- Target 2026-08-24_281479aac2004b49255abef9332fcd22_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- Sample260825-vdmp1awdra
- SHA256 5478f8a8db427f1e354b525d97080bc450f0e714935f430980fe39775fc09862
- MD5 281479aac2004b49255abef9332fcd22
- SHA1 ea87443871c271bb8486d4640104603a1cb13124
- SHA512 9a9fb220b2ca12d1062fc0f9c227fdc7e19ec8b84d02f58b3f397606db81c278c8e47f425f1bc35ea38b31f81f116dd5771fa0c46771e840314ba11cb80708cf
- SSDEEP 24576:tfCXQ4R+L8xPsQWOReHznSgouvz0ZRHkFfenxyQZXS7gZnQh2NIq:4g6WOCSgouvAeFfenxyQZXS7uQ0NIq
- TLSH T1E7955B42B7F88129F2F37B70DAF953A05BB67C68ED39C14E5281116E1EB4A509A31733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_281479aac2004b49255abef9332fcd22_amadey_darkgate_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_281479aac2004b49255abef9332fcd22_amadey_darkgate_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_281479aac2004b49255abef9332fcd22_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- SHA256 5478f8a8db427f1e354b525d97080bc450f0e714935f430980fe39775fc09862
- MD5 281479aac2004b49255abef9332fcd22
- SHA1 ea87443871c271bb8486d4640104603a1cb13124
- SHA512 9a9fb220b2ca12d1062fc0f9c227fdc7e19ec8b84d02f58b3f397606db81c278c8e47f425f1bc35ea38b31f81f116dd5771fa0c46771e840314ba11cb80708cf
- SSDEEP 24576:tfCXQ4R+L8xPsQWOReHznSgouvz0ZRHkFfenxyQZXS7gZnQh2NIq:4g6WOCSgouvAeFfenxyQZXS7uQ0NIq
- TLSH T1E7955B42B7F88129F2F37B70DAF953A05BB67C68ED39C14E5281116E1EB4A509A31733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1